LPS-34190 it was wrong to add the OPERATOR_ADD checking because it means "append" and not "create" and so we must assume the record exists and do the fetch
LPS-34190 the protected updateResourcePermission method was confusing because of the operator parameter, it must always be OPERATOR_SET and so make this explicit by removing the param and adding only where it's required
LPS-34190 in order to support not having to fetch in a batch where we already determined the entities do not exist, add a parameter which indicates not to perform the fetch,  however in most cases we will fetch
LPS-34190 this check causes the duplicate key violation